2026-08-10_61c3bf8ca95826df35d414728c531957_akira_cobalt-strike_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-10_61c3bf8ca95826df35d414728c531957_akira_cobalt-strike_rusty-stealer_satacom
Size 4.7MB
Sample260810-keregayzhy
SHA256 06d84d5a9f5b5a0ffea58b34291aeb2a898de80143aa8a33909ed947ea7ad20f
MD5 61c3bf8ca95826df35d414728c531957
SHA1 6fa538fa4bbbf77f9dfa2dac093c7441c1180f1c
SHA512 6be5c1edf70ac15b5f572b87557cfbe0dc92f4bac564e56a80dc06b644d0c6e4609297b5081e26a45a8bc2868d15710411332699456540c845c377334f539ed6
SSDEEP 49152:4AuiJQtQTgTcrfuDVZSIXNnmwC8twU/PUDB7bJ9DbKY4txM2jt7p32b/tsP9FJvs:LIPvs
TLSH
T10436E816B77950D9C1BBC07886839F22B920748D47393BF76AC4466A2F20EF86D7D364
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_61c3bf8ca95826df35d414728c531957_akira_cobalt-strike_rusty-stealer_satacom

File Explorer

2026-08-10_61c3bf8ca95826df35d414728c531957_akira_cobalt-strike_rusty-stealer_satacom

.exe 4.7MB

2026-08-10_61c3bf8ca95826df35d414728c531957_akira_cobalt-strike_rusty-stealer_satacom

IMPHASH 3b7efaf5e7a91a11e762bb3b1d932a3e
SHA256 06d84d5a9f5b5a0ffea58b34291aeb2a898de80143aa8a33909ed947ea7ad20f
MD5 61c3bf8ca95826df35d414728c531957
SHA1 6fa538fa4bbbf77f9dfa2dac093c7441c1180f1c
SHA512 6be5c1edf70ac15b5f572b87557cfbe0dc92f4bac564e56a80dc06b644d0c6e4609297b5081e26a45a8bc2868d15710411332699456540c845c377334f539ed6
SSDEEP 49152:4AuiJQtQTgTcrfuDVZSIXNnmwC8twU/PUDB7bJ9DbKY4txM2jt7p32b/tsP9FJvs:LIPvs
TLSH
T10436E816B77950D9C1BBC07886839F22B920748D47393BF76AC4466A2F20EF86D7D364
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3475856

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

durationdump.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

bcryptprimitives

ProcessPrng

kernel32

FormatMessageW SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetLastError CloseHandle WaitForSingleObject SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle CreateFileW SetFileTime GetProcessHeap HeapFree HeapReAlloc QueryPerformanceCounter GetCurrentProcessId GetCurrentProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetFileInformationByHandle GetFileInformationByHandleEx GetStdHandle AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW lstrlenW FindFirstFileExW FindClose ExitProcess GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex HeapAlloc ReadConsoleW MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP GetModuleHandleW GetModuleHandleA FindNextFileW

ntdll

NtWriteFile NtReadFile RtlNtStatusToDosError

vcruntime140

memcpy memmove __current_exception __CxxFrameHandler3 __C_specific_handler _CxxThrowException __current_exception_context memcmp memset

api-ms-win-crt-math-l1-1-0

fmod floor trunc round __setusermatherr

api-ms-win-crt-runtime-l1-1-0

_set_app_type _seh_filter_exe _configure_narrow_argv _initialize_narrow_environment terminate _initterm _initterm_e exit _exit __p___argc _crt_atexit _cexit _c_exit _register_thread_local_exe_atexit_callback _get_initial_narrow_environment __p___argv _initialize_onexit_table _register_onexit_function

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_61c3bf8ca95826df35d414728c531957_akira_cobalt-strike_rusty-stealer_satacom

api-ms-win-core-synch-l1-2-0

bcryptprimitives

kernel32

ntdll

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic